summaryrefslogtreecommitdiffstats
path: root/extensions/libxt_connbytes.man
diff options
context:
space:
mode:
Diffstat (limited to 'extensions/libxt_connbytes.man')
-rw-r--r--extensions/libxt_connbytes.man6
1 files changed, 6 insertions, 0 deletions
diff --git a/extensions/libxt_connbytes.man b/extensions/libxt_connbytes.man
index b5608a35..e475cae7 100644
--- a/extensions/libxt_connbytes.man
+++ b/extensions/libxt_connbytes.man
@@ -9,6 +9,12 @@ scheduled using a lower priority band in traffic control.
.PP
The transferred bytes per connection can also be viewed through
`conntrack -L` and accessed via ctnetlink.
+.PP
+NOTE that for connections which have no accounting information, the match will
+always return false. The "net.netfilter.nf_conntrack_acct" sysctl flag controls
+whether \fBnew\fP connections will be byte/packet counted. Existing connection
+flows will not be gaining/losing a/the accounting structure when be sysctl flag
+is flipped.
.TP
[\fB!\fP] \fB\-\-connbytes\fP \fIfrom\fP[\fB:\fP\fIto\fP]
match packets from a connection whose packets/bytes/average packet